The Threat CodexSOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks
#ForestBlizzard #Storm_2754
https://www.microsoft.com/en-us/security/blog/2026/04/07/soho-router-compromise-leads-to-dns-hijacking-and-adversary-in-the-middle-attacks/
#ForestBlizzard #Storm_2754
https://www.microsoft.com/en-us/security/blog/2026/04/07/soho-router-compromise-leads-to-dns-hijacking-and-adversary-in-the-middle-attacks/
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks | Microsoft Security Blog
Executive summary Forest Blizzard, a threat actor linked to the Russian military, has been compromising insecure home and small-office internet equipment like routers, then modifying their settings in ways that turn them into part of the actor’s malicious infrastructure.